timonel 2.3.0 → 2.5.0

package/dist/lib/resources/cloud/aws/awsResources.d.ts

@@ -0,0 +1,165 @@
+import { ApiObject } from 'cdk8s';
+import { BaseResourceProvider } from '../../baseResourceProvider.js';
+/**
+ * AWS-specific Kubernetes resources provider
+ * Handles AWS integrations like EBS, EFS, ALB, IRSA, and other AWS services
+ *
+ * @since 2.4.0
+ */
+export declare class AWSResources extends BaseResourceProvider {
+    private static readonly STORAGE_API_VERSION;
+    private static readonly CORE_API_VERSION;
+    private static readonly NETWORKING_API_VERSION;
+    /**
+     * Creates an AWS EBS StorageClass
+     * @param spec - EBS StorageClass specification
+     * @returns Created StorageClass ApiObject
+     *
+     * @example
+     * ```typescript
+     * awsResources.addEBSStorageClass({
+     *   name: 'fast-ebs',
+     *   volumeType: 'gp3',
+     *   encrypted: true,
+     *   allowVolumeExpansion: true
+     * });
+     * ```
+     *
+     * @since 2.4.0
+     */
+    addEBSStorageClass(spec: AWSEBSStorageClassSpec): ApiObject;
+    /**
+     * Creates an AWS EFS StorageClass
+     * @param spec - EFS StorageClass specification
+     * @returns Created StorageClass ApiObject
+     *
+     * @example
+     * ```typescript
+     * awsResources.addEFSStorageClass({
+     *   name: 'efs-storage',
+     *   fileSystemId: 'fs-12345678',
+     *   directoryPerms: '0755'
+     * });
+     * ```
+     *
+     * @since 2.4.0
+     */
+    addEFSStorageClass(spec: AWSEFSStorageClassSpec): ApiObject;
+    /**
+     * Creates an AWS IRSA (IAM Roles for Service Accounts) ServiceAccount
+     * @param spec - IRSA ServiceAccount specification
+     * @returns Created ServiceAccount ApiObject
+     *
+     * @example
+     * ```typescript
+     * awsResources.addIRSAServiceAccount({
+     *   name: 'aws-service-account',
+     *   roleArn: 'arn:aws:iam::123456789012:role/MyRole'
+     * });
+     * ```
+     *
+     * @since 2.4.0
+     */
+    addIRSAServiceAccount(spec: AWSIRSAServiceAccountSpec): ApiObject;
+    /**
+     * Creates an AWS ALB Ingress
+     * @param spec - ALB Ingress specification
+     * @returns Created Ingress ApiObject
+     *
+     * @example
+     * ```typescript
+     * awsResources.addALBIngress({
+     *   name: 'web-ingress',
+     *   rules: [{
+     *     paths: [{
+     *       path: '/',
+     *       pathType: 'Prefix',
+     *       backend: { service: { name: 'web-service', port: { number: 80 } } }
+     *     }]
+     *   }],
+     *   scheme: 'internet-facing'
+     * });
+     * ```
+     *
+     * @since 2.4.0
+     */
+    addALBIngress(spec: AWSALBIngressSpec): ApiObject;
+    /**
+     * Validates AWS IAM Role ARN format
+     * @param roleArn - Role ARN to validate
+     */
+    private validateRoleArn;
+    /**
+     * Builds ALB-specific annotations
+     * @param spec - ALB Ingress specification
+     * @returns ALB annotations
+     */
+    private buildALBAnnotations;
+}
+export interface AWSEBSStorageClassSpec {
+    name: string;
+    volumeType?: 'gp2' | 'gp3' | 'io1' | 'io2' | 'sc1' | 'st1';
+    encrypted?: boolean;
+    iops?: number;
+    throughput?: number;
+    fsType?: string;
+    reclaimPolicy?: 'Delete' | 'Retain';
+    allowVolumeExpansion?: boolean;
+    volumeBindingMode?: 'Immediate' | 'WaitForFirstConsumer';
+    labels?: Record<string, string>;
+    annotations?: Record<string, string>;
+}
+export interface AWSEFSStorageClassSpec {
+    name: string;
+    fileSystemId?: string;
+    directoryPerms?: string;
+    gidRangeStart?: number;
+    gidRangeEnd?: number;
+    basePath?: string;
+    reclaimPolicy?: 'Delete' | 'Retain';
+    volumeBindingMode?: 'Immediate' | 'WaitForFirstConsumer';
+    labels?: Record<string, string>;
+    annotations?: Record<string, string>;
+}
+export interface AWSIRSAServiceAccountSpec {
+    name: string;
+    roleArn: string;
+    automountServiceAccountToken?: boolean;
+    imagePullSecrets?: Array<{
+        name: string;
+    }>;
+    labels?: Record<string, string>;
+    annotations?: Record<string, string>;
+}
+export interface AWSALBIngressSpec {
+    name: string;
+    rules: Array<{
+        host?: string;
+        paths: Array<{
+            path: string;
+            pathType: 'Exact' | 'Prefix' | 'ImplementationSpecific';
+            backend: {
+                service: {
+                    name: string;
+                    port: {
+                        number?: number;
+                        name?: string;
+                    };
+                };
+            };
+        }>;
+    }>;
+    tls?: Array<{
+        hosts?: string[];
+        secretName?: string;
+    }>;
+    scheme?: 'internet-facing' | 'internal';
+    targetType?: 'ip' | 'instance';
+    certificateArn?: string;
+    sslRedirect?: boolean;
+    healthCheckPath?: string;
+    ingressClassName?: string;
+    labels?: Record<string, string>;
+    annotations?: Record<string, string>;
+}
+//# sourceMappingURL=awsResources.d.ts.map

package/dist/lib/resources/cloud/aws/awsResources.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"awsResources.d.ts","sourceRoot":"","sources":["../../../../../src/lib/resources/cloud/aws/awsResources.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC;AAElC,OAAO,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AAErE;;;;;GAKG;AACH,qBAAa,YAAa,SAAQ,oBAAoB;IACpD,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,mBAAmB,CAAuB;IAClE,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAAQ;IAChD,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,sBAAsB,CAA0B;IAExE;;;;;;;;;;;;;;;;OAgBG;IACH,kBAAkB,CAAC,IAAI,EAAE,sBAAsB,GAAG,SAAS;IA2B3D;;;;;;;;;;;;;;;OAeG;IACH,kBAAkB,CAAC,IAAI,EAAE,sBAAsB,GAAG,SAAS;IA0B3D;;;;;;;;;;;;;;OAcG;IACH,qBAAqB,CAAC,IAAI,EAAE,yBAAyB,GAAG,SAAS;IAuBjE;;;;;;;;;;;;;;;;;;;;;OAqBG;IACH,aAAa,CAAC,IAAI,EAAE,iBAAiB,GAAG,SAAS;IAmBjD;;;OAGG;IACH,OAAO,CAAC,eAAe;IAYvB;;;;OAIG;IACH,OAAO,CAAC,mBAAmB;CA4B5B;AAGD,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,CAAC,EAAE,KAAK,GAAG,KAAK,GAAG,KAAK,GAAG,KAAK,GAAG,KAAK,GAAG,KAAK,CAAC;IAC3D,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,aAAa,CAAC,EAAE,QAAQ,GAAG,QAAQ,CAAC;IACpC,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B,iBAAiB,CAAC,EAAE,WAAW,GAAG,sBAAsB,CAAC;IACzD,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACtC;AAED,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,aAAa,CAAC,EAAE,QAAQ,GAAG,QAAQ,CAAC;IACpC,iBAAiB,CAAC,EAAE,WAAW,GAAG,sBAAsB,CAAC;IACzD,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACtC;AAED,MAAM,WAAW,yBAAyB;IACxC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,4BAA4B,CAAC,EAAE,OAAO,CAAC;IACvC,gBAAgB,CAAC,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC3C,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACtC;AAED,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,KAAK,CAAC;QACX,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,KAAK,EAAE,KAAK,CAAC;YACX,IAAI,EAAE,MAAM,CAAC;YACb,QAAQ,EAAE,OAAO,GAAG,QAAQ,GAAG,wBAAwB,CAAC;YACxD,OAAO,EAAE;gBACP,OAAO,EAAE;oBAAE,IAAI,EAAE,MAAM,CAAC;oBAAC,IAAI,EAAE;wBAAE,MAAM,CAAC,EAAE,MAAM,CAAC;wBAAC,IAAI,CAAC,EAAE,MAAM,CAAA;qBAAE,CAAA;iBAAE,CAAC;aACrE,CAAC;SACH,CAAC,CAAC;KACJ,CAAC,CAAC;IACH,GAAG,CAAC,EAAE,KAAK,CAAC;QACV,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;QACjB,UAAU,CAAC,EAAE,MAAM,CAAC;KACrB,CAAC,CAAC;IACH,MAAM,CAAC,EAAE,iBAAiB,GAAG,UAAU,CAAC;IACxC,UAAU,CAAC,EAAE,IAAI,GAAG,UAAU,CAAC;IAC/B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACtC"}

package/dist/lib/resources/cloud/aws/awsResources.js

@@ -0,0 +1,187 @@
+import { ApiObject } from 'cdk8s';
+import { BaseResourceProvider } from '../../baseResourceProvider.js';
+/**
+ * AWS-specific Kubernetes resources provider
+ * Handles AWS integrations like EBS, EFS, ALB, IRSA, and other AWS services
+ *
+ * @since 2.4.0
+ */
+export class AWSResources extends BaseResourceProvider {
+    /**
+     * Creates an AWS EBS StorageClass
+     * @param spec - EBS StorageClass specification
+     * @returns Created StorageClass ApiObject
+     *
+     * @example
+     * ```typescript
+     * awsResources.addEBSStorageClass({
+     *   name: 'fast-ebs',
+     *   volumeType: 'gp3',
+     *   encrypted: true,
+     *   allowVolumeExpansion: true
+     * });
+     * ```
+     *
+     * @since 2.4.0
+     */
+    addEBSStorageClass(spec) {
+        const parameters = {
+            type: spec.volumeType ?? 'gp3',
+            ...(spec.encrypted !== undefined ? { encrypted: String(spec.encrypted) } : {}),
+            ...(spec.iops ? { iops: String(spec.iops) } : {}),
+            ...(spec.throughput ? { throughput: String(spec.throughput) } : {}),
+            ...(spec.fsType ? { fsType: spec.fsType } : {}),
+        };
+        const storageClassSpec = {
+            provisioner: 'ebs.csi.aws.com',
+            parameters,
+            reclaimPolicy: spec.reclaimPolicy ?? 'Delete',
+            allowVolumeExpansion: spec.allowVolumeExpansion ?? true,
+            volumeBindingMode: spec.volumeBindingMode ?? 'WaitForFirstConsumer',
+        };
+        return this.createApiObject(spec.name, AWSResources.STORAGE_API_VERSION, 'StorageClass', storageClassSpec, spec.labels, spec.annotations);
+    }
+    /**
+     * Creates an AWS EFS StorageClass
+     * @param spec - EFS StorageClass specification
+     * @returns Created StorageClass ApiObject
+     *
+     * @example
+     * ```typescript
+     * awsResources.addEFSStorageClass({
+     *   name: 'efs-storage',
+     *   fileSystemId: 'fs-12345678',
+     *   directoryPerms: '0755'
+     * });
+     * ```
+     *
+     * @since 2.4.0
+     */
+    addEFSStorageClass(spec) {
+        const parameters = {
+            ...(spec.fileSystemId ? { fileSystemId: spec.fileSystemId } : {}),
+            ...(spec.directoryPerms ? { directoryPerms: spec.directoryPerms } : {}),
+            ...(spec.gidRangeStart ? { gidRangeStart: String(spec.gidRangeStart) } : {}),
+            ...(spec.gidRangeEnd ? { gidRangeEnd: String(spec.gidRangeEnd) } : {}),
+            ...(spec.basePath ? { basePath: spec.basePath } : {}),
+        };
+        const storageClassSpec = {
+            provisioner: 'efs.csi.aws.com',
+            parameters,
+            reclaimPolicy: spec.reclaimPolicy ?? 'Delete',
+            volumeBindingMode: spec.volumeBindingMode ?? 'Immediate',
+        };
+        return this.createApiObject(spec.name, AWSResources.STORAGE_API_VERSION, 'StorageClass', storageClassSpec, spec.labels, spec.annotations);
+    }
+    /**
+     * Creates an AWS IRSA (IAM Roles for Service Accounts) ServiceAccount
+     * @param spec - IRSA ServiceAccount specification
+     * @returns Created ServiceAccount ApiObject
+     *
+     * @example
+     * ```typescript
+     * awsResources.addIRSAServiceAccount({
+     *   name: 'aws-service-account',
+     *   roleArn: 'arn:aws:iam::123456789012:role/MyRole'
+     * });
+     * ```
+     *
+     * @since 2.4.0
+     */
+    addIRSAServiceAccount(spec) {
+        this.validateRoleArn(spec.roleArn);
+        const annotations = {
+            'eks.amazonaws.com/role-arn': spec.roleArn,
+            ...(spec.annotations ?? {}),
+        };
+        return new ApiObject(this.chart, spec.name, {
+            apiVersion: AWSResources.CORE_API_VERSION,
+            kind: 'ServiceAccount',
+            metadata: {
+                name: spec.name,
+                annotations,
+                ...(spec.labels ? { labels: spec.labels } : {}),
+            },
+            ...(spec.automountServiceAccountToken !== undefined
+                ? { automountServiceAccountToken: spec.automountServiceAccountToken }
+                : {}),
+            ...(spec.imagePullSecrets ? { imagePullSecrets: spec.imagePullSecrets } : {}),
+        });
+    }
+    /**
+     * Creates an AWS ALB Ingress
+     * @param spec - ALB Ingress specification
+     * @returns Created Ingress ApiObject
+     *
+     * @example
+     * ```typescript
+     * awsResources.addALBIngress({
+     *   name: 'web-ingress',
+     *   rules: [{
+     *     paths: [{
+     *       path: '/',
+     *       pathType: 'Prefix',
+     *       backend: { service: { name: 'web-service', port: { number: 80 } } }
+     *     }]
+     *   }],
+     *   scheme: 'internet-facing'
+     * });
+     * ```
+     *
+     * @since 2.4.0
+     */
+    addALBIngress(spec) {
+        const annotations = this.buildALBAnnotations(spec);
+        const ingressSpec = {
+            ...(spec.ingressClassName ? { ingressClassName: spec.ingressClassName } : {}),
+            rules: spec.rules,
+            ...(spec.tls ? { tls: spec.tls } : {}),
+        };
+        return this.createApiObject(spec.name, AWSResources.NETWORKING_API_VERSION, 'Ingress', ingressSpec, spec.labels, annotations);
+    }
+    /**
+     * Validates AWS IAM Role ARN format
+     * @param roleArn - Role ARN to validate
+     */
+    validateRoleArn(roleArn) {
+        // Skip validation for Helm template values
+        if (roleArn.includes('{{') && roleArn.includes('}}')) {
+            return;
+        }
+        const arnRegex = /^arn:aws:iam::\d{12}:role\/[\w+=,.@-]+$/;
+        if (!arnRegex.test(roleArn)) {
+            throw new Error(`Invalid AWS IAM Role ARN format: ${roleArn}`);
+        }
+    }
+    /**
+     * Builds ALB-specific annotations
+     * @param spec - ALB Ingress specification
+     * @returns ALB annotations
+     */
+    buildALBAnnotations(spec) {
+        const annotations = {
+            'kubernetes.io/ingress.class': 'alb',
+            ...(spec.annotations ?? {}),
+        };
+        if (spec.scheme) {
+            annotations['alb.ingress.kubernetes.io/scheme'] = spec.scheme;
+        }
+        if (spec.targetType) {
+            annotations['alb.ingress.kubernetes.io/target-type'] = spec.targetType;
+        }
+        if (spec.certificateArn) {
+            annotations['alb.ingress.kubernetes.io/certificate-arn'] = spec.certificateArn;
+        }
+        if (spec.sslRedirect) {
+            annotations['alb.ingress.kubernetes.io/ssl-redirect'] = '443';
+        }
+        if (spec.healthCheckPath) {
+            annotations['alb.ingress.kubernetes.io/healthcheck-path'] = spec.healthCheckPath;
+        }
+        return annotations;
+    }
+}
+AWSResources.STORAGE_API_VERSION = 'storage.k8s.io/v1';
+AWSResources.CORE_API_VERSION = 'v1';
+AWSResources.NETWORKING_API_VERSION = 'networking.k8s.io/v1';
+//# sourceMappingURL=awsResources.js.map

package/dist/lib/resources/cloud/aws/awsResources.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"awsResources.js","sourceRoot":"","sources":["../../../../../src/lib/resources/cloud/aws/awsResources.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC;AAElC,OAAO,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AAErE;;;;;GAKG;AACH,MAAM,OAAO,YAAa,SAAQ,oBAAoB;IAKpD;;;;;;;;;;;;;;;;OAgBG;IACH,kBAAkB,CAAC,IAA4B;QAC7C,MAAM,UAAU,GAA2B;YACzC,IAAI,EAAE,IAAI,CAAC,UAAU,IAAI,KAAK;YAC9B,GAAG,CAAC,IAAI,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9E,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjD,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnE,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAChD,CAAC;QAEF,MAAM,gBAAgB,GAAG;YACvB,WAAW,EAAE,iBAAiB;YAC9B,UAAU;YACV,aAAa,EAAE,IAAI,CAAC,aAAa,IAAI,QAAQ;YAC7C,oBAAoB,EAAE,IAAI,CAAC,oBAAoB,IAAI,IAAI;YACvD,iBAAiB,EAAE,IAAI,CAAC,iBAAiB,IAAI,sBAAsB;SACpE,CAAC;QAEF,OAAO,IAAI,CAAC,eAAe,CACzB,IAAI,CAAC,IAAI,EACT,YAAY,CAAC,mBAAmB,EAChC,cAAc,EACd,gBAAgB,EAChB,IAAI,CAAC,MAAM,EACX,IAAI,CAAC,WAAW,CACjB,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;;;;;OAeG;IACH,kBAAkB,CAAC,IAA4B;QAC7C,MAAM,UAAU,GAA2B;YACzC,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjE,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACvE,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5E,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACtE,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACtD,CAAC;QAEF,MAAM,gBAAgB,GAAG;YACvB,WAAW,EAAE,iBAAiB;YAC9B,UAAU;YACV,aAAa,EAAE,IAAI,CAAC,aAAa,IAAI,QAAQ;YAC7C,iBAAiB,EAAE,IAAI,CAAC,iBAAiB,IAAI,WAAW;SACzD,CAAC;QAEF,OAAO,IAAI,CAAC,eAAe,CACzB,IAAI,CAAC,IAAI,EACT,YAAY,CAAC,mBAAmB,EAChC,cAAc,EACd,gBAAgB,EAChB,IAAI,CAAC,MAAM,EACX,IAAI,CAAC,WAAW,CACjB,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;;;;OAcG;IACH,qBAAqB,CAAC,IAA+B;QACnD,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAEnC,MAAM,WAAW,GAA2B;YAC1C,4BAA4B,EAAE,IAAI,CAAC,OAAO;YAC1C,GAAG,CAAC,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC;SAC5B,CAAC;QAEF,OAAO,IAAI,SAAS,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,EAAE;YAC1C,UAAU,EAAE,YAAY,CAAC,gBAAgB;YACzC,IAAI,EAAE,gBAAgB;YACtB,QAAQ,EAAE;gBACR,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,WAAW;gBACX,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAChD;YACD,GAAG,CAAC,IAAI,CAAC,4BAA4B,KAAK,SAAS;gBACjD,CAAC,CAAC,EAAE,4BAA4B,EAAE,IAAI,CAAC,4BAA4B,EAAE;gBACrE,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,IAAI,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC9E,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;OAqBG;IACH,aAAa,CAAC,IAAuB;QACnC,MAAM,WAAW,GAAG,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC;QAEnD,MAAM,WAAW,GAAG;YAClB,GAAG,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,IAAI,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7E,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACvC,CAAC;QAEF,OAAO,IAAI,CAAC,eAAe,CACzB,IAAI,CAAC,IAAI,EACT,YAAY,CAAC,sBAAsB,EACnC,SAAS,EACT,WAAW,EACX,IAAI,CAAC,MAAM,EACX,WAAW,CACZ,CAAC;IACJ,CAAC;IAED;;;OAGG;IACK,eAAe,CAAC,OAAe;QACrC,2CAA2C;QAC3C,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YACrD,OAAO;QACT,CAAC;QAED,MAAM,QAAQ,GAAG,yCAAyC,CAAC;QAC3D,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,KAAK,CAAC,oCAAoC,OAAO,EAAE,CAAC,CAAC;QACjE,CAAC;IACH,CAAC;IAED;;;;OAIG;IACK,mBAAmB,CAAC,IAAuB;QACjD,MAAM,WAAW,GAA2B;YAC1C,6BAA6B,EAAE,KAAK;YACpC,GAAG,CAAC,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC;SAC5B,CAAC;QAEF,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,WAAW,CAAC,kCAAkC,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC;QAChE,CAAC;QAED,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACpB,WAAW,CAAC,uCAAuC,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC;QACzE,CAAC;QAED,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YACxB,WAAW,CAAC,2CAA2C,CAAC,GAAG,IAAI,CAAC,cAAc,CAAC;QACjF,CAAC;QAED,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACrB,WAAW,CAAC,wCAAwC,CAAC,GAAG,KAAK,CAAC;QAChE,CAAC;QAED,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;YACzB,WAAW,CAAC,4CAA4C,CAAC,GAAG,IAAI,CAAC,eAAe,CAAC;QACnF,CAAC;QAED,OAAO,WAAW,CAAC;IACrB,CAAC;;AAzNuB,gCAAmB,GAAG,mBAAmB,CAAC;AAC1C,6BAAgB,GAAG,IAAI,CAAC;AACxB,mCAAsB,GAAG,sBAAsB,CAAC"}

package/dist/lib/resources/cloud/azure/azureResources.d.ts

@@ -0,0 +1,169 @@
+import type { ApiObject } from 'cdk8s';
+import { BaseResourceProvider } from '../../baseResourceProvider.js';
+/**
+ * Azure-specific Kubernetes resources provider
+ * Handles Azure integrations like Azure Disk, Azure File, Application Gateway, AGIC, and other Azure services
+ *
+ * @since 2.4.0
+ */
+export declare class AzureResources extends BaseResourceProvider {
+    private static readonly STORAGE_API_VERSION;
+    private static readonly NETWORKING_API_VERSION;
+    /**
+     * Creates an Azure Disk StorageClass
+     * @param spec - Azure Disk StorageClass specification
+     * @returns Created StorageClass ApiObject
+     *
+     * @example
+     * ```typescript
+     * azureResources.addAzureDiskStorageClass({
+     *   name: 'premium-disk',
+     *   skuName: 'Premium_LRS',
+     *   cachingMode: 'ReadOnly',
+     *   allowVolumeExpansion: true
+     * });
+     * ```
+     *
+     * @since 2.4.0
+     */
+    addAzureDiskStorageClass(spec: AzureDiskStorageClassSpec): ApiObject;
+    /**
+     * Creates an Azure File StorageClass
+     * @param spec - Azure File StorageClass specification
+     * @returns Created StorageClass ApiObject
+     *
+     * @example
+     * ```typescript
+     * azureResources.addAzureFileStorageClass({
+     *   name: 'azure-file-premium',
+     *   skuName: 'Premium_LRS',
+     *   protocol: 'nfs',
+     *   allowSharedAccess: true
+     * });
+     * ```
+     *
+     * @since 2.4.0
+     */
+    addAzureFileStorageClass(spec: AzureFileStorageClassSpec): ApiObject;
+    /**
+     * Creates an Azure Application Gateway Ingress
+     * @param spec - AGIC Ingress specification
+     * @returns Created Ingress ApiObject
+     *
+     * @example
+     * ```typescript
+     * azureResources.addApplicationGatewayIngress({
+     *   name: 'app-gateway-ingress',
+     *   host: 'myapp.example.com',
+     *   serviceName: 'my-service',
+     *   servicePort: 80,
+     *   sslRedirect: true
+     * });
+     * ```
+     *
+     * @since 2.4.0
+     */
+    addApplicationGatewayIngress(spec: AzureAGICIngressSpec): ApiObject;
+    /**
+     * Creates an Azure Key Vault SecretProviderClass
+     * @param spec - Azure Key Vault SecretProviderClass specification
+     * @returns Created SecretProviderClass ApiObject
+     *
+     * @example
+     * ```typescript
+     * azureResources.addAzureKeyVaultSecretProviderClass({
+     *   name: 'app-secrets',
+     *   keyVaultName: 'my-keyvault',
+     *   tenantId: '87654321-4321-4321-4321-210987654321',
+     *   objects: [
+     *     { objectName: 'database-password', objectType: 'secret' }
+     *   ]
+     * });
+     * ```
+     *
+     * @since 2.4.0
+     */
+    addAzureKeyVaultSecretProviderClass(spec: AzureKeyVaultSecretProviderClassSpec): ApiObject;
+    /**
+     * Creates an Azure Container Registry ServiceAccount
+     * @param spec - Azure ACR ServiceAccount specification
+     * @returns Created ServiceAccount ApiObject
+     *
+     * @example
+     * ```typescript
+     * azureResources.addAzureACRServiceAccount({
+     *   name: 'acr-service-account',
+     *   acrName: 'myregistry',
+     *   resourceGroup: 'my-rg'
+     * });
+     * ```
+     *
+     * @since 2.4.0
+     */
+    addAzureACRServiceAccount(spec: AzureACRServiceAccountSpec): ApiObject;
+}
+export interface AzureDiskStorageClassSpec {
+    name: string;
+    skuName?: 'Standard_LRS' | 'Premium_LRS' | 'StandardSSD_LRS' | 'UltraSSD_LRS';
+    cachingMode?: 'None' | 'ReadOnly' | 'ReadWrite';
+    fsType?: string;
+    kind?: 'Shared' | 'Dedicated' | 'Managed';
+    reclaimPolicy?: 'Delete' | 'Retain';
+    allowVolumeExpansion?: boolean;
+    volumeBindingMode?: 'Immediate' | 'WaitForFirstConsumer';
+    labels?: Record<string, string>;
+    annotations?: Record<string, string>;
+}
+export interface AzureFileStorageClassSpec {
+    name: string;
+    skuName?: 'Standard_LRS' | 'Premium_LRS';
+    protocol?: 'smb' | 'nfs';
+    allowSharedAccess?: boolean;
+    reclaimPolicy?: 'Delete' | 'Retain';
+    allowVolumeExpansion?: boolean;
+    volumeBindingMode?: 'Immediate' | 'WaitForFirstConsumer';
+    labels?: Record<string, string>;
+    annotations?: Record<string, string>;
+}
+export interface AzureAGICIngressSpec {
+    name: string;
+    host: string;
+    serviceName: string;
+    servicePort: number;
+    path?: string;
+    sslRedirect?: boolean;
+    cookieBasedAffinity?: boolean;
+    requestTimeout?: number;
+    connectionDraining?: boolean;
+    tls?: Array<{
+        hosts: string[];
+        secretName: string;
+    }>;
+    labels?: Record<string, string>;
+    annotations?: Record<string, string>;
+}
+export interface AzureKeyVaultSecretProviderClassSpec {
+    name: string;
+    keyVaultName: string;
+    tenantId: string;
+    objects: Array<{
+        objectName: string;
+        objectType: 'secret' | 'key' | 'cert';
+        objectAlias?: string;
+        objectVersion?: string;
+    }>;
+    secretName?: string;
+    userAssignedIdentityID?: string;
+    labels?: Record<string, string>;
+    annotations?: Record<string, string>;
+}
+export interface AzureACRServiceAccountSpec {
+    name: string;
+    acrName: string;
+    resourceGroup?: string;
+    clientId?: string;
+    tenantId?: string;
+    labels?: Record<string, string>;
+    annotations?: Record<string, string>;
+}
+//# sourceMappingURL=azureResources.d.ts.map

package/dist/lib/resources/cloud/azure/azureResources.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"azureResources.d.ts","sourceRoot":"","sources":["../../../../../src/lib/resources/cloud/azure/azureResources.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC;AAEvC,OAAO,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AAErE;;;;;GAKG;AACH,qBAAa,cAAe,SAAQ,oBAAoB;IACtD,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,mBAAmB,CAAuB;IAClE,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,sBAAsB,CAA0B;IAExE;;;;;;;;;;;;;;;;OAgBG;IACH,wBAAwB,CAAC,IAAI,EAAE,yBAAyB,GAAG,SAAS;IA0BpE;;;;;;;;;;;;;;;;OAgBG;IACH,wBAAwB,CAAC,IAAI,EAAE,yBAAyB,GAAG,SAAS;IA2BpE;;;;;;;;;;;;;;;;;OAiBG;IACH,4BAA4B,CAAC,IAAI,EAAE,oBAAoB,GAAG,SAAS;IAqDnE;;;;;;;;;;;;;;;;;;OAkBG;IACH,mCAAmC,CAAC,IAAI,EAAE,oCAAoC,GAAG,SAAS;IAgD1F;;;;;;;;;;;;;;;OAeG;IACH,yBAAyB,CAAC,IAAI,EAAE,0BAA0B,GAAG,SAAS;CAkBvE;AAGD,MAAM,WAAW,yBAAyB;IACxC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,cAAc,GAAG,aAAa,GAAG,iBAAiB,GAAG,cAAc,CAAC;IAC9E,WAAW,CAAC,EAAE,MAAM,GAAG,UAAU,GAAG,WAAW,CAAC;IAChD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,QAAQ,GAAG,WAAW,GAAG,SAAS,CAAC;IAC1C,aAAa,CAAC,EAAE,QAAQ,GAAG,QAAQ,CAAC;IACpC,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B,iBAAiB,CAAC,EAAE,WAAW,GAAG,sBAAsB,CAAC;IACzD,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACtC;AAED,MAAM,WAAW,yBAAyB;IACxC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,cAAc,GAAG,aAAa,CAAC;IACzC,QAAQ,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC;IACzB,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,aAAa,CAAC,EAAE,QAAQ,GAAG,QAAQ,CAAC;IACpC,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B,iBAAiB,CAAC,EAAE,WAAW,GAAG,sBAAsB,CAAC;IACzD,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACtC;AAED,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,GAAG,CAAC,EAAE,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,EAAE,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACrD,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACtC;AAED,MAAM,WAAW,oCAAoC;IACnD,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,KAAK,CAAC;QACb,UAAU,EAAE,MAAM,CAAC;QACnB,UAAU,EAAE,QAAQ,GAAG,KAAK,GAAG,MAAM,CAAC;QACtC,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,aAAa,CAAC,EAAE,MAAM,CAAC;KACxB,CAAC,CAAC;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACtC;AAED,MAAM,WAAW,0BAA0B;IACzC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACtC"}